willwang-openai f8ab57359d Add manual callback input to MCP OAuth login (#44629) ...

## Why

Allow MCP authentication to complete when the browser cannot reach the callback page by accepting the full redirect URL copied from its address bar.

## What changed

- Add `codex mcp login <name> --no-browser` to print the authorization URL and accept a pasted callback without launching a browser. HTTP callbacks remain supported while waiting for input.
- Validate pasted redirect URLs and OAuth responses before exchanging tokens, hide terminal input, bound input size, and avoid echoing callback values in diagnostics.
- Preserve manual input across discovered-scope retries and support cancellation during callback input and token exchange.

## Testing

Add unit and CLI integration tests for callback validation, bounded input, credential storage, HTTP callback completion with stdin open, scope retries, and cancellation during token exchange.

GitOrigin-RevId: 16ea9c3221f72d93e6e3e5acdc6b9465293a0a65

2026-09-10 19:51:52 +00:00

..

app_server_daemon.rs

Add an explicit app-server daemon update command (#43562)

2026-09-07 19:11:41 +00:00

app_server.rs

Support the app-server daemon on Windows (#42405)

2026-09-03 01:26:35 +00:00

cloud_auth.rs

Restrict cloud task credentials to trusted origins (#41403)

2026-08-28 19:44:50 +00:00

cloud_config.rs

Respect config layers when removing plugin marketplaces (#40683)

2026-08-25 19:38:39 +00:00

debug_clear_memories.rs

Add macOS voice runtime projection (#42204)

2026-09-02 04:52:32 +00:00

debug_models.rs

Add codex debug models to show model catalog (#18625)

2026-04-20 05:42:22 +00:00

delete.rs

Add session delete commands in CLI and TUI (#27476)

2026-06-10 18:04:02 -07:00

doctor_enterprise_network.rs

Report managed filesystem policy in codex doctor (#42821)

2026-09-04 18:23:10 +00:00

doctor_path_safety.rs

Treat non-interactive dumb terminals as warnings in codex doctor (#44615)

2026-09-10 18:40:07 +00:00

exec_server.rs

Expose a stable executor build identity in environment metadata (#43513)

2026-09-07 16:55:06 +00:00

execpolicy.rs

…

features.rs

Remove the deprecated codex mcp-server command (#42993)

2026-09-05 12:17:32 +00:00

login.rs

Support managed AWS access keys for Amazon Bedrock (#40481)

2026-08-24 21:39:48 +00:00

marketplace_add.rs

Add JSON output for plugin subcommands (#26631)

2026-06-05 14:40:31 -05:00

marketplace_remove.rs

Respect config layers when removing plugin marketplaces (#40683)

2026-08-25 19:38:39 +00:00

marketplace_upgrade.rs

Upgrade Git marketplaces from merged configuration (#42149)

2026-09-01 22:37:26 +00:00

mcp_add_remove.rs

Support package-style MCP server names (#41700)

2026-08-30 16:45:34 +00:00

mcp_list.rs

Add dynamic HTTP header helpers for MCP servers (#38245)

2026-08-12 20:36:32 +00:00

mcp_login.rs

Add manual callback input to MCP OAuth login (#44629)

2026-09-10 19:51:52 +00:00

plugin_cli.rs

Support remote marketplaces in the plugin CLI (#42150)

2026-09-01 22:51:14 +00:00

queue.rs

Add a command to queue messages for existing sessions (#39092)

2026-08-17 22:44:37 +00:00

sandbox_cloud_config.rs

Load cloud-managed profiles for codex sandbox (#35685)

2026-07-27 23:16:37 +00:00

sandbox_network_proxy.rs

Allow explicitly permitted loopback proxy targets (#34603)

2026-07-21 19:50:11 +00:00

sandbox_tty.rs

Harden the macOS sandbox against terminal input injection (#42590)

2026-09-03 18:00:14 +00:00

update.rs

Add codex update command (#19933)

2026-04-27 23:33:59 -07:00

worktree.rs

Tag TUI startup metrics with terminal and multiplexer categories (#43937)

2026-09-08 22:39:16 +00:00